@rathnasgala2/schemas 3.40.0 → 3.42.0

package/openapi/openapi.yaml

@@ -9098,11 +9098,21 @@ components:
           minLength: 1
           pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
           type: string
+        grantExpiresAt:
+          description: "SCHEMA-3.41.0: when an operator grant ends, or null when it is open-ended or the plan is not an operator grant."
+          oneOf:
+            - $ref: "#/components/schemas/PortableProblemRfc3339"
+            - type: "null"
+        source:
+          $ref: "#/components/schemas/PlanSource"
+          description: "SCHEMA-3.41.0: where the plan comes from. A `source` of OPERATOR is a complimentary plan the Galascribe team granted; the App shows it as 'Complimentary Basic/Pro' (until `grantExpiresAt` when set) and keeps the upgrade action so the organization can subscribe."
         tier:
           $ref: "#/components/schemas/PlatformPlanKey"
           description: The plan tier.
       required:
         - tier
+        - source
+        - grantExpiresAt
         - collaborators
         - entitlements
       type: object
@@ -9488,6 +9498,45 @@ components:
         - label
         - createdAt
       type: object
+    PlanGrant:
+      additionalProperties: false
+      description: "SCHEMA-3.41.0: an operator plan grant, a complimentary Basic (`PRO`) or Pro (`BUSINESS`) plan given without Stripe."
+      properties:
+        expiresAt:
+          oneOf:
+            - $ref: "#/components/schemas/PortableProblemRfc3339"
+            - type: "null"
+        grantedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        grantedBy:
+          description: The operator's person id.
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        organizationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        planTier:
+          $ref: "#/components/schemas/PlatformPlanKey"
+          description: "`PRO` or `BUSINESS`."
+        reasonCode:
+          $ref: "#/components/schemas/PlatformOperatorReasonCode"
+      required:
+        - organizationId
+        - planTier
+        - expiresAt
+        - reasonCode
+        - grantedAt
+        - grantedBy
+      type: object
+    PlanSource:
+      description: "SCHEMA-3.41.0: where an organization's plan comes from. `NONE` is Free with no subscription and no grant; `STRIPE` is a Stripe subscription; `OPERATOR` is a grant the Galascribe team made."
+      enum:
+        - NONE
+        - STRIPE
+        - OPERATOR
+      type: string
     PlatformAbuseCaseDetail:
       additionalProperties: false
       description: Review evidence for one abuse case. Report reasons include only open reports and are sorted and distinct; reporter identities and notes are never exposed.
@@ -10408,6 +10457,11 @@ components:
           type:
             - string
             - "null"
+        organizations:
+          description: "SCHEMA-3.41.0: every organization the person owns, in name order."
+          items:
+            $ref: "#/components/schemas/PlatformUserOrganization"
+          type: array
         personId:
           format: uuid
           pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
@@ -10433,9 +10487,37 @@ components:
         - lastSignInAt
         - publicationCount
         - planTiers
+        - organizations
         - contactEmailOnFile
         - contactEmail
       type: object
+    PlatformUserOrganization:
+      additionalProperties: false
+      description: "SCHEMA-3.41.0: an organization a person owns, with its plan and the active operator grant."
+      properties:
+        grant:
+          oneOf:
+            - $ref: "#/components/schemas/PlanGrant"
+            - type: "null"
+        name:
+          maxLength: 255
+          minLength: 1
+          type: string
+        organizationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        planSource:
+          $ref: "#/components/schemas/PlanSource"
+        planTier:
+          $ref: "#/components/schemas/PlatformPlanKey"
+      required:
+        - organizationId
+        - name
+        - planTier
+        - planSource
+        - grant
+      type: object
     PlatformWebhookEvent:
       additionalProperties: false
       description: Redacted webhook inbox metadata and immutable routing coordinates. The request body and payload digest are deliberately never exposed.
@@ -19367,6 +19449,9 @@ components:
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsResponse:
       allOf:
         - $ref: "#/components/schemas/SyndicationConnection"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsXAuthorizeResponse:
+      allOf:
+        - $ref: "#/components/schemas/SyndicationXAuthorization"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesByDeliveryIdRetryResponse:
       allOf:
         - $ref: "#/components/schemas/SyndicationDelivery"
@@ -21991,6 +22076,29 @@ components:
       required:
         - change
       type: object
+    PutPlatformOrganizationsByOrganizationIdPlanGrantRequest:
+      additionalProperties: false
+      properties:
+        expiresAt:
+          description: Null for open-ended; otherwise in the future.
+          oneOf:
+            - $ref: "#/components/schemas/PortableProblemRfc3339"
+            - type: "null"
+        planTier:
+          description: "`FREE` is not a grant tier; a DELETE ends the grant."
+          enum:
+            - PRO
+            - BUSINESS
+          type: string
+        reasonCode:
+          $ref: "#/components/schemas/PlatformOperatorReasonCode"
+      required:
+        - planTier
+        - expiresAt
+        - reasonCode
+      type: object
+    PutPlatformOrganizationsByOrganizationIdPlanGrantResponse:
+      $ref: "#/components/schemas/PlanGrant"
     PutPlatformPlansByPlanKeyRequest:
       additionalProperties: false
       properties:
@@ -23827,6 +23935,9 @@ components:
           maxLength: 200
           minLength: 1
           type: string
+        allowance:
+          $ref: "#/components/schemas/SyndicationWeeklyAllowance"
+          description: SCHEMA-3.41.0. Present when `kind` is `x`, the organization's X posts left this UTC week.
         attention:
           $ref: "#/components/schemas/SyndicationConnectionAttention"
         createdAt:
@@ -23856,7 +23967,7 @@ components:
       description: SCHEMA-3.37.0. Why a connection stopped posting, present while its `status` is `NEEDS_ATTENTION`. `message` is written for the author.
       properties:
         code:
-          description: A stable upper-case reason, for example `CREDENTIAL_REJECTED`. A client shows a value it does not know as `message`.
+          description: "A stable upper-case reason, for example `CREDENTIAL_REJECTED`, or `REAUTHORIZE` (SCHEMA-3.41.0: X refused the saved refresh token, so the person must press Connect X again). A client shows a value it does not know as `message`."
           maxLength: 64
           minLength: 1
           pattern: ^[A-Z][A-Z0-9_]*$
@@ -23974,7 +24085,6 @@ components:
           mastodon: "#/components/schemas/SyndicationCredentialMastodon"
           telegram: "#/components/schemas/SyndicationCredentialTelegram"
           wordpress: "#/components/schemas/SyndicationCredentialWordpress"
-          x: "#/components/schemas/SyndicationCredentialX"
         propertyName: kind
       oneOf:
         - $ref: "#/components/schemas/SyndicationCredentialDevto"
@@ -23985,7 +24095,6 @@ components:
         - $ref: "#/components/schemas/SyndicationCredentialDiscord"
         - $ref: "#/components/schemas/SyndicationCredentialWordpress"
         - $ref: "#/components/schemas/SyndicationCredentialGhost"
-        - $ref: "#/components/schemas/SyndicationCredentialX"
     SyndicationCredentialBluesky:
       additionalProperties: false
       description: SCHEMA-3.37.0. A Bluesky handle and app password.
@@ -24184,41 +24293,6 @@ components:
         - username
         - applicationPassword
       type: object
-    SyndicationCredentialX:
-      additionalProperties: false
-      description: SCHEMA-3.40.0. The author's own X developer app, OAuth 1.0a user context with Read and Write. X bills the author's developer account for every post.
-      properties:
-        accessToken:
-          maxLength: 200
-          minLength: 8
-          type: string
-          writeOnly: true
-        accessTokenSecret:
-          maxLength: 200
-          minLength: 8
-          type: string
-          writeOnly: true
-        apiKey:
-          maxLength: 200
-          minLength: 8
-          type: string
-          writeOnly: true
-        apiKeySecret:
-          maxLength: 200
-          minLength: 8
-          type: string
-          writeOnly: true
-        kind:
-          pattern: ^x$
-          type: string
-          x-gala-const: x
-      required:
-        - kind
-        - apiKey
-        - apiKeySecret
-        - accessToken
-        - accessTokenSecret
-      type: object
     SyndicationDelivery:
       additionalProperties: false
       description: SCHEMA-3.37.0. One post of one live article to one platform. `connectionId` is absent once the connection was removed; `kind` and `accountLabel` stay. `externalUrl` is the post on the platform, absent for `discord` and until the delivery is `SENT`.
@@ -24282,7 +24356,7 @@ components:
       description: SCHEMA-3.37.0. Why a delivery failed. `message` is the platform's own words when it gave any, else Galascribe's.
       properties:
         code:
-          description: A stable upper-case reason, for example `CREDENTIAL_REJECTED`, `PLATFORM_REJECTED` or `RETRIES_EXHAUSTED`. A client shows a value it does not know as `message`.
+          description: A stable upper-case reason, for example `CREDENTIAL_REJECTED`, `PLATFORM_REJECTED`, `RETRIES_EXHAUSTED` or, since SCHEMA-3.41.0, `WEEKLY_ALLOWANCE_SPENT` (an X delivery, status `FAILED`, message "X posts for this week are used. They come back on <Mon d>."; a manual retry after the allowance renews works). A client shows a value it does not know as `message`.
           maxLength: 64
           minLength: 1
           pattern: ^[A-Z][A-Z0-9_]*$
@@ -24369,6 +24443,46 @@ components:
       required:
         - credential
       type: object
+    SyndicationWeeklyAllowance:
+      additionalProperties: false
+      description: SCHEMA-3.41.0. How many X posts the organization has left this UTC week. The allowance follows the organization's plan (2 on Basic and 5 on Pro by default, as the platform settings say) and is shared by every X connection of the organization. Wording follows `InterviewPolicy.quota`.
+      properties:
+        limit:
+          format: int64
+          minimum: 0
+          type: integer
+        period:
+          description: The UTC week the allowance counts in, as its Monday, `YYYY-MM-DD`
+          format: date
+          pattern: ^[0-9]{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12][0-9]|3[01])$
+          type: string
+        remaining:
+          format: int64
+          minimum: 0
+          type: integer
+        renewsAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: The first instant of the next UTC week (Monday 00:00Z), when the allowance comes back
+      required:
+        - period
+        - renewsAt
+        - limit
+        - remaining
+      type: object
+    SyndicationXAuthorization:
+      additionalProperties: false
+      description: SCHEMA-3.41.0. Where to send the person to let Galascribe's own X app post for them. Open `authorizationUrl` (x.com); X brings the browser back to `GET /v2/callbacks/x/oauth` within 10 minutes (`expiresAt`).
+      properties:
+        authorizationUrl:
+          format: uri
+          maxLength: 2048
+          type: string
+        expiresAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+      required:
+        - authorizationUrl
+        - expiresAt
+      type: object
     VerificationPlanEntry:
       additionalProperties: false
       properties:
@@ -25809,6 +25923,77 @@ paths:
         - NONE
       x-gala-success-category: billing-callback
       x-gala-tenant-scope: NONE
+  /v2/callbacks/x/oauth:
+    get:
+      description: |
+        SCHEMA-3.41.0. The address X sends the person back to after the consent screen. It never answers with a problem document for what the provider sends: every outcome is a `303` to the App at `/settings/syndication?x=<connectionId>` on success or `/settings/syndication?xError=<code>` with `<code>` one of `DENIED` (the person refused on x.com), `EXPIRED` (the state is unknown or older than 10 minutes), `LIMIT` (the publication is at its connection limit), `REJECTED` (X refused the code or the account read) or `UNAVAILABLE` (X could not be reached or is not configured). Reconnecting an X account already connected to the same publication replaces its tokens in place (same connection) and clears attention. `code`, `state`, `error` and `error_description` are never logged or echoed. Only a value longer than its limit is refused as `400 VALIDATION_FAILED`, before any connection is touched.
+      operationId: getCallbacksXOauth
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: example
+          in: query
+          name: code
+          required: false
+          schema:
+            maxLength: 8192
+            minLength: 1
+            type: string
+        - example: example
+          in: query
+          name: state
+          required: false
+          schema:
+            maxLength: 8192
+            minLength: 1
+            type: string
+        - example: example
+          in: query
+          name: error
+          required: false
+          schema:
+            maxLength: 8192
+            minLength: 1
+            type: string
+        - example: example
+          in: query
+          name: error_description
+          required: false
+          schema:
+            maxLength: 8192
+            minLength: 1
+            type: string
+      responses:
+        "303":
+          description: consume the exact X OAuth callback transaction succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Location:
+              $ref: "#/components/headers/Location"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+      security: []
+      summary: consume the exact X OAuth callback transaction
+      tags:
+        - callbacks
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: null
+      x-gala-concurrency: single-use-transaction
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: consume the exact X OAuth callback transaction
+      x-gala-reachable-problems:
+        - VALIDATION_FAILED
+      x-gala-replay-identity: oauth-state
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: oauth-callback
+      x-gala-tenant-scope: NONE
   /v2/claims/{token}:
     get:
       description: |
@@ -33673,6 +33858,8 @@ paths:
                       galascribeHosting: true
                       includedDomain: false
                     galascribeAddressZone: galascribe.com
+                    grantExpiresAt: null
+                    source: STRIPE
                     tier: PRO
               schema:
                 $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPlanResponse"
@@ -65404,10 +65591,10 @@ paths:
         - NONE
       x-gala-success-category: create
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:
-    delete:
-      description: Removes the connection and destroys its saved credential. Posts already made stay on the platform; its deliveries stay in the history with their kind and account name. Needs `publication.settings.manage`. Removing a connection that is already gone answers `404 SYNDICATION_CONNECTION_NOT_FOUND`.
-      operationId: deleteOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionId
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/x:authorize:
+    post:
+      description: "SCHEMA-3.41.0. Starts connecting X. Galascribe's own X app posts on the author's behalf: the author never handles keys, X bills Galascribe, and the organization's plan sets a weekly allowance of X posts (2 on Basic, 5 on Pro by default; none on Free). The answer carries the address on x.com to send the person to; X brings the browser back to `GET /v2/callbacks/x/oauth` within 10 minutes, which saves the connection and lands on the Syndication settings page. Needs `publication.settings.manage`. `409 PLAN_REQUIRED` when the plan allows no X posts, `409 SYNDICATION_CONNECTION_LIMIT` at 12 connections, `503 SYNDICATION_X_NOT_CONFIGURED` when the platform operator has not configured the X app, `429 RATE_LIMITED` after too many attempts."
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsXAuthorize
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -65426,22 +65613,26 @@ paths:
             format: uuid
             pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
             type: string
-        - example: 018f0000-0000-7000-8000-000000000001
-          in: path
-          name: connectionId
-          required: true
-          schema:
-            format: uuid
-            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
-            type: string
         - $ref: "#/components/parameters/IdempotencyKey"
         - $ref: "#/components/parameters/XCsrfToken"
       responses:
-        "204":
-          description: remove a syndication connection succeeded
+        "201":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    authorizationUrl: https://x.com/i/oauth2/authorize?response_type=code&client_id=example-client-id&state=example-state
+                    expiresAt: "2026-11-06T12:10:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsXAuthorizeResponse"
+          description: start connecting X succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
+            Location:
+              $ref: "#/components/headers/Location"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
         "400":
@@ -65542,22 +65733,9 @@ paths:
                     status: 404
                     title: RESOURCE_NOT_FOUND
                     type: urn:gala:problem:resource-not-found
-                SYNDICATION_CONNECTION_NOT_FOUND:
-                  summary: SYNDICATION_CONNECTION_NOT_FOUND
-                  value:
-                    code: SYNDICATION_CONNECTION_NOT_FOUND
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 404
-                    title: SYNDICATION_CONNECTION_NOT_FOUND
-                    type: urn:gala:problem:syndication-connection-not-found
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: RESOURCE_NOT_FOUND, SYNDICATION_CONNECTION_NOT_FOUND
+          description: RESOURCE_NOT_FOUND
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -65565,7 +65743,6 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - RESOURCE_NOT_FOUND
-            - SYNDICATION_CONNECTION_NOT_FOUND
         "409":
           content:
             application/problem+json:
@@ -65583,9 +65760,35 @@ paths:
                     status: 409
                     title: COMMAND_REPLAY_CONFLICT
                     type: urn:gala:problem:command-replay-conflict
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+                SYNDICATION_CONNECTION_LIMIT:
+                  summary: SYNDICATION_CONNECTION_LIMIT
+                  value:
+                    code: SYNDICATION_CONNECTION_LIMIT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: SYNDICATION_CONNECTION_LIMIT
+                    type: urn:gala:problem:syndication-connection-limit
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: COMMAND_REPLAY_CONFLICT
+          description: COMMAND_REPLAY_CONFLICT, PLAN_REQUIRED, SYNDICATION_CONNECTION_LIMIT
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -65593,9 +65796,67 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - COMMAND_REPLAY_CONFLICT
+            - PLAN_REQUIRED
+            - SYNDICATION_CONNECTION_LIMIT
+        "429":
+          content:
+            application/problem+json:
+              examples:
+                RATE_LIMITED:
+                  summary: RATE_LIMITED
+                  value:
+                    code: RATE_LIMITED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 429
+                    title: RATE_LIMITED
+                    type: urn:gala:problem:rate-limited
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RATE_LIMITED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Retry-After:
+              $ref: "#/components/headers/RetryAfter"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RATE_LIMITED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                SYNDICATION_X_NOT_CONFIGURED:
+                  summary: SYNDICATION_X_NOT_CONFIGURED
+                  value:
+                    code: SYNDICATION_X_NOT_CONFIGURED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: SYNDICATION_X_NOT_CONFIGURED
+                    type: urn:gala:problem:syndication-x-not-configured
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: SYNDICATION_X_NOT_CONFIGURED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - SYNDICATION_X_NOT_CONFIGURED
       security:
         - browserSession: []
-      summary: remove a syndication connection
+      summary: start connecting X
       tags:
         - syndication
       x-gala-activation-gate: MVP
@@ -65606,22 +65867,26 @@ paths:
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
       x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: remove a syndication connection
+      x-gala-purpose: start connecting X
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
         - COMMAND_REPLAY_CONFLICT
+        - PLAN_REQUIRED
+        - RATE_LIMITED
         - RESOURCE_NOT_FOUND
-        - SYNDICATION_CONNECTION_NOT_FOUND
+        - SYNDICATION_CONNECTION_LIMIT
+        - SYNDICATION_X_NOT_CONFIGURED
         - VALIDATION_FAILED
       x-gala-replay-identity: idempotency-key
       x-gala-state-guards:
         - NONE
-      x-gala-success-category: delete
+      x-gala-success-category: create
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-    get:
-      description: One connection with its status, the reason it needs attention when it does, its options and its newest delivery. Needs `publication.view`.
-      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionId
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:
+    delete:
+      description: Removes the connection and destroys its saved credential. Posts already made stay on the platform; its deliveries stay in the history with their kind and account name. Needs `publication.settings.manage`. Removing a connection that is already gone answers `404 SYNDICATION_CONNECTION_NOT_FOUND`.
+      operationId: deleteOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionId
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -65648,27 +65913,11 @@ paths:
             format: uuid
             pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
             type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
       responses:
-        "200":
-          content:
-            application/json:
-              examples:
-                nominal:
-                  summary: Nominal successful response
-                  value:
-                    accountLabel: "@example.bsky.social"
-                    createdAt: "2026-11-05T12:00:00.000Z"
-                    id: 018f0000-0000-7000-8000-000000000001
-                    kind: bluesky
-                    lastDelivery:
-                      at: "2026-11-05T12:00:00.000Z"
-                      deliveryId: 018f0000-0000-7000-8000-000000000002
-                      status: SENT
-                    options: {}
-                    status: ACTIVE
-              schema:
-                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdResponse"
-          description: read one syndication connection succeeded
+        "204":
+          description: remove a syndication connection succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -65796,35 +66045,62 @@ paths:
           x-gala-problem-codes:
             - RESOURCE_NOT_FOUND
             - SYNDICATION_CONNECTION_NOT_FOUND
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
       security:
         - browserSession: []
-      summary: read one syndication connection
+      summary: remove a syndication connection
       tags:
         - syndication
       x-gala-activation-gate: MVP
       x-gala-activation-guards:
         - NONE
-      x-gala-capability-key: publication.view
+      x-gala-capability-key: publication.settings.manage
       x-gala-concurrency: authorization-and-publication-epochs
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
       x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: read one syndication connection
+      x-gala-purpose: remove a syndication connection
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
         - RESOURCE_NOT_FOUND
         - SYNDICATION_CONNECTION_NOT_FOUND
         - VALIDATION_FAILED
-      x-gala-replay-identity: safe-query
+      x-gala-replay-identity: idempotency-key
       x-gala-state-guards:
         - NONE
-      x-gala-success-category: query
+      x-gala-success-category: delete
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:pause:
-    post:
-      description: Stops posting to this platform. Deliveries filed while it is paused are recorded as `SKIPPED`; a post already `RETRYING` is skipped at its next attempt. Pausing a paused connection changes nothing. Needs `publication.settings.manage`.
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdPause
+    get:
+      description: One connection with its status, the reason it needs attention when it does, its options and its newest delivery. Needs `publication.view`.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionId
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -65851,8 +66127,6 @@ paths:
             format: uuid
             pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
             type: string
-        - $ref: "#/components/parameters/IdempotencyKey"
-        - $ref: "#/components/parameters/XCsrfToken"
       responses:
         "200":
           content:
@@ -65872,8 +66146,8 @@ paths:
                     options: {}
                     status: ACTIVE
               schema:
-                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdPauseResponse"
-          description: pause a syndication connection succeeded
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdResponse"
+          description: read one syndication connection succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -66001,63 +66275,35 @@ paths:
           x-gala-problem-codes:
             - RESOURCE_NOT_FOUND
             - SYNDICATION_CONNECTION_NOT_FOUND
-        "409":
-          content:
-            application/problem+json:
-              examples:
-                COMMAND_REPLAY_CONFLICT:
-                  summary: COMMAND_REPLAY_CONFLICT
-                  value:
-                    code: COMMAND_REPLAY_CONFLICT
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 409
-                    title: COMMAND_REPLAY_CONFLICT
-                    type: urn:gala:problem:command-replay-conflict
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: COMMAND_REPLAY_CONFLICT
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - COMMAND_REPLAY_CONFLICT
       security:
         - browserSession: []
-      summary: pause a syndication connection
+      summary: read one syndication connection
       tags:
         - syndication
       x-gala-activation-gate: MVP
       x-gala-activation-guards:
         - NONE
-      x-gala-capability-key: publication.settings.manage
+      x-gala-capability-key: publication.view
       x-gala-concurrency: authorization-and-publication-epochs
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
       x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: pause a syndication connection
+      x-gala-purpose: read one syndication connection
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
-        - COMMAND_REPLAY_CONFLICT
         - RESOURCE_NOT_FOUND
         - SYNDICATION_CONNECTION_NOT_FOUND
         - VALIDATION_FAILED
-      x-gala-replay-identity: idempotency-key
+      x-gala-replay-identity: safe-query
       x-gala-state-guards:
         - NONE
-      x-gala-success-category: protocol
+      x-gala-success-category: query
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:replace-credential:
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:pause:
     post:
-      description: "Checks the new credential with the platform and, when it is accepted, replaces the saved one and sets the connection `ACTIVE`; the old credential is destroyed. The new `credential.kind` must equal the connection's kind. Same problems as connecting: `422 SYNDICATION_CREDENTIAL_REJECTED` with the platform's message, `503 SYNDICATION_PLATFORM_UNAVAILABLE`. Needs `publication.settings.manage`."
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdReplaceCredential
+      description: Stops posting to this platform. Deliveries filed while it is paused are recorded as `SKIPPED`; a post already `RETRYING` is skipped at its next attempt. Pausing a paused connection changes nothing. Needs `publication.settings.manage`.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdPause
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -66086,20 +66332,6 @@ paths:
             type: string
         - $ref: "#/components/parameters/IdempotencyKey"
         - $ref: "#/components/parameters/XCsrfToken"
-      requestBody:
-        content:
-          application/json:
-            examples:
-              nominal:
-                summary: Nominal valid request
-                value:
-                  credential:
-                    appPassword: abcd-efgh-ijkl-mnop
-                    handle: example.bsky.social
-                    kind: bluesky
-            schema:
-              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdReplaceCredentialRequest"
-        required: true
       responses:
         "200":
           content:
@@ -66119,8 +66351,8 @@ paths:
                     options: {}
                     status: ACTIVE
               schema:
-                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdReplaceCredentialResponse"
-          description: replace the credential of a syndication connection succeeded
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdPauseResponse"
+          description: pause a syndication connection succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -66130,19 +66362,6 @@ paths:
           content:
             application/problem+json:
               examples:
-                REQUEST_FIELD_UNKNOWN:
-                  summary: REQUEST_FIELD_UNKNOWN
-                  value:
-                    code: REQUEST_FIELD_UNKNOWN
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: REQUEST_FIELD_UNKNOWN
-                    type: urn:gala:problem:request-field-unknown
                 VALIDATION_FAILED:
                   summary: VALIDATION_FAILED
                   value:
@@ -66158,14 +66377,13 @@ paths:
                     type: urn:gala:problem:validation-failed
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
+          description: VALIDATION_FAILED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
-            - REQUEST_FIELD_UNKNOWN
             - VALIDATION_FAILED
         "401":
           content:
@@ -66289,93 +66507,9 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - COMMAND_REPLAY_CONFLICT
-        "422":
-          content:
-            application/problem+json:
-              examples:
-                SYNDICATION_CREDENTIAL_REJECTED:
-                  summary: SYNDICATION_CREDENTIAL_REJECTED
-                  value:
-                    code: SYNDICATION_CREDENTIAL_REJECTED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    platformMessage: Bad credentials
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 422
-                    title: SYNDICATION_CREDENTIAL_REJECTED
-                    type: urn:gala:problem:syndication-credential-rejected
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: SYNDICATION_CREDENTIAL_REJECTED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - SYNDICATION_CREDENTIAL_REJECTED
-        "429":
-          content:
-            application/problem+json:
-              examples:
-                RATE_LIMITED:
-                  summary: RATE_LIMITED
-                  value:
-                    code: RATE_LIMITED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: true
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 429
-                    title: RATE_LIMITED
-                    type: urn:gala:problem:rate-limited
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: RATE_LIMITED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            Retry-After:
-              $ref: "#/components/headers/RetryAfter"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - RATE_LIMITED
-        "503":
-          content:
-            application/problem+json:
-              examples:
-                SYNDICATION_PLATFORM_UNAVAILABLE:
-                  summary: SYNDICATION_PLATFORM_UNAVAILABLE
-                  value:
-                    code: SYNDICATION_PLATFORM_UNAVAILABLE
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: true
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 503
-                    title: SYNDICATION_PLATFORM_UNAVAILABLE
-                    type: urn:gala:problem:syndication-platform-unavailable
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: SYNDICATION_PLATFORM_UNAVAILABLE
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - SYNDICATION_PLATFORM_UNAVAILABLE
       security:
         - browserSession: []
-      summary: replace the credential of a syndication connection
+      summary: pause a syndication connection
       tags:
         - syndication
       x-gala-activation-gate: MVP
@@ -66386,27 +66520,23 @@ paths:
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
       x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: replace the credential of a syndication connection
+      x-gala-purpose: pause a syndication connection
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
         - COMMAND_REPLAY_CONFLICT
-        - RATE_LIMITED
-        - REQUEST_FIELD_UNKNOWN
         - RESOURCE_NOT_FOUND
         - SYNDICATION_CONNECTION_NOT_FOUND
-        - SYNDICATION_CREDENTIAL_REJECTED
-        - SYNDICATION_PLATFORM_UNAVAILABLE
         - VALIDATION_FAILED
       x-gala-replay-identity: idempotency-key
       x-gala-state-guards:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:resume:
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:replace-credential:
     post:
-      description: Checks the saved credential with the platform, then sets the connection `ACTIVE`. Resuming an active connection checks it again and changes nothing else. `422 SYNDICATION_CREDENTIAL_REJECTED` when the platform no longer accepts the credential (the connection then needs attention), `503 SYNDICATION_PLATFORM_UNAVAILABLE` when the platform could not be reached. Needs `publication.settings.manage`.
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdResume
+      description: "Checks the new credential with the platform and, when it is accepted, replaces the saved one and sets the connection `ACTIVE`; the old credential is destroyed. The new `credential.kind` must equal the connection's kind. Same problems as connecting: `422 SYNDICATION_CREDENTIAL_REJECTED` with the platform's message, `503 SYNDICATION_PLATFORM_UNAVAILABLE`. Needs `publication.settings.manage`. SCHEMA-3.41.0: an `x` connection takes no credential; it is reconnected through `syndication-connections/x:authorize`, and this operation refuses it."
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdReplaceCredential
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -66435,6 +66565,20 @@ paths:
             type: string
         - $ref: "#/components/parameters/IdempotencyKey"
         - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  credential:
+                    appPassword: abcd-efgh-ijkl-mnop
+                    handle: example.bsky.social
+                    kind: bluesky
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdReplaceCredentialRequest"
+        required: true
       responses:
         "200":
           content:
@@ -66454,8 +66598,8 @@ paths:
                     options: {}
                     status: ACTIVE
               schema:
-                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdResumeResponse"
-          description: resume a syndication connection succeeded
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdReplaceCredentialResponse"
+          description: replace the credential of a syndication connection succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -66465,6 +66609,19 @@ paths:
           content:
             application/problem+json:
               examples:
+                REQUEST_FIELD_UNKNOWN:
+                  summary: REQUEST_FIELD_UNKNOWN
+                  value:
+                    code: REQUEST_FIELD_UNKNOWN
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: REQUEST_FIELD_UNKNOWN
+                    type: urn:gala:problem:request-field-unknown
                 VALIDATION_FAILED:
                   summary: VALIDATION_FAILED
                   value:
@@ -66480,13 +66637,14 @@ paths:
                     type: urn:gala:problem:validation-failed
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: VALIDATION_FAILED
+          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
+            - REQUEST_FIELD_UNKNOWN
             - VALIDATION_FAILED
         "401":
           content:
@@ -66696,7 +66854,7 @@ paths:
             - SYNDICATION_PLATFORM_UNAVAILABLE
       security:
         - browserSession: []
-      summary: resume a syndication connection
+      summary: replace the credential of a syndication connection
       tags:
         - syndication
       x-gala-activation-gate: MVP
@@ -66707,12 +66865,13 @@ paths:
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
       x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: resume a syndication connection
+      x-gala-purpose: replace the credential of a syndication connection
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
         - COMMAND_REPLAY_CONFLICT
         - RATE_LIMITED
+        - REQUEST_FIELD_UNKNOWN
         - RESOURCE_NOT_FOUND
         - SYNDICATION_CONNECTION_NOT_FOUND
         - SYNDICATION_CREDENTIAL_REJECTED
@@ -66723,10 +66882,10 @@ paths:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:verify:
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:resume:
     post:
-      description: Checks the saved credential with the platform now and refreshes `accountLabel`. A paused connection stays paused; a connection that needs attention becomes `ACTIVE` when the platform accepts the credential. `422 SYNDICATION_CREDENTIAL_REJECTED` when it does not (the connection then needs attention), `503 SYNDICATION_PLATFORM_UNAVAILABLE` when the platform could not be reached. Needs `publication.settings.manage`.
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdVerify
+      description: Checks the saved credential with the platform, then sets the connection `ACTIVE`. Resuming an active connection checks it again and changes nothing else. `422 SYNDICATION_CREDENTIAL_REJECTED` when the platform no longer accepts the credential (the connection then needs attention), `503 SYNDICATION_PLATFORM_UNAVAILABLE` when the platform could not be reached. Needs `publication.settings.manage`.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdResume
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -66774,8 +66933,8 @@ paths:
                     options: {}
                     status: ACTIVE
               schema:
-                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdVerifyResponse"
-          description: check a syndication connection succeeded
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdResumeResponse"
+          description: resume a syndication connection succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -67016,7 +67175,7 @@ paths:
             - SYNDICATION_PLATFORM_UNAVAILABLE
       security:
         - browserSession: []
-      summary: check a syndication connection
+      summary: resume a syndication connection
       tags:
         - syndication
       x-gala-activation-gate: MVP
@@ -67027,7 +67186,7 @@ paths:
       x-gala-conditional-capabilities: []
       x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
       x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: check a syndication connection
+      x-gala-purpose: resume a syndication connection
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - AUTHORIZATION_DENIED
@@ -67043,10 +67202,10 @@ paths:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-deliveries:
-    get:
-      description: "The newest 50 deliveries of this publication, newest first: what was posted where, what is waiting to be retried and what failed and why. Needs `publication.view`."
-      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveries
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-connections/{connectionId}:verify:
+    post:
+      description: Checks the saved credential with the platform now and refreshes `accountLabel`. A paused connection stays paused; a connection that needs attention becomes `ACTIVE` when the platform accepts the credential. `422 SYNDICATION_CREDENTIAL_REJECTED` when it does not (the connection then needs attention), `503 SYNDICATION_PLATFORM_UNAVAILABLE` when the platform could not be reached. Needs `publication.settings.manage`.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdVerify
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -67065,184 +67224,9 @@ paths:
             format: uuid
             pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
             type: string
-      responses:
-        "200":
-          content:
-            application/json:
-              examples:
-                nominal:
-                  summary: Nominal successful response
-                  value:
-                    deliveries:
-                      - accountLabel: "@example.bsky.social"
-                        attemptCount: 1
-                        connectionId: 018f0000-0000-7000-8000-000000000001
-                        contentId: 018f0000-0000-7000-8000-000000000003
-                        contentTitle: Why we cut onboarding from nine steps to four
-                        createdAt: "2026-11-05T12:00:00.000Z"
-                        externalUrl: https://bsky.app/profile/example.bsky.social/post/3kexample
-                        id: 018f0000-0000-7000-8000-000000000002
-                        kind: bluesky
-                        liveUrl: https://example.com/onboarding/
-                        requestedBy: ANNOUNCEMENT
-                        status: SENT
-                        updatedAt: "2026-11-05T12:00:00.000Z"
-              schema:
-                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesResponse"
-          description: list syndication deliveries succeeded
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-        "400":
-          content:
-            application/problem+json:
-              examples:
-                VALIDATION_FAILED:
-                  summary: VALIDATION_FAILED
-                  value:
-                    code: VALIDATION_FAILED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: VALIDATION_FAILED
-                    type: urn:gala:problem:validation-failed
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: VALIDATION_FAILED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - VALIDATION_FAILED
-        "401":
-          content:
-            application/problem+json:
-              examples:
-                AUTHENTICATION_REQUIRED:
-                  summary: AUTHENTICATION_REQUIRED
-                  value:
-                    code: AUTHENTICATION_REQUIRED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 401
-                    title: AUTHENTICATION_REQUIRED
-                    type: urn:gala:problem:authentication-required
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: AUTHENTICATION_REQUIRED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - AUTHENTICATION_REQUIRED
-        "403":
-          content:
-            application/problem+json:
-              examples:
-                AUTHORIZATION_DENIED:
-                  summary: AUTHORIZATION_DENIED
-                  value:
-                    code: AUTHORIZATION_DENIED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 403
-                    title: AUTHORIZATION_DENIED
-                    type: urn:gala:problem:authorization-denied
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: AUTHORIZATION_DENIED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - AUTHORIZATION_DENIED
-        "404":
-          content:
-            application/problem+json:
-              examples:
-                RESOURCE_NOT_FOUND:
-                  summary: RESOURCE_NOT_FOUND
-                  value:
-                    code: RESOURCE_NOT_FOUND
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 404
-                    title: RESOURCE_NOT_FOUND
-                    type: urn:gala:problem:resource-not-found
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: RESOURCE_NOT_FOUND
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - RESOURCE_NOT_FOUND
-      security:
-        - browserSession: []
-      summary: list syndication deliveries
-      tags:
-        - syndication
-      x-gala-activation-gate: MVP
-      x-gala-activation-guards:
-        - NONE
-      x-gala-capability-key: publication.view
-      x-gala-concurrency: authorization-and-publication-epochs
-      x-gala-conditional-capabilities: []
-      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
-      x-gala-nullability: required-and-nullable-are-explicit
-      x-gala-purpose: list syndication deliveries
-      x-gala-reachable-problems:
-        - AUTHENTICATION_REQUIRED
-        - AUTHORIZATION_DENIED
-        - RESOURCE_NOT_FOUND
-        - VALIDATION_FAILED
-      x-gala-replay-identity: safe-query
-      x-gala-state-guards:
-        - NONE
-      x-gala-success-category: query
-      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-    post:
-      description: Files one delivery of a post that is already live to each chosen connection and answers `202` with the new deliveries in the order of `connectionIds`; the posting itself happens afterwards. Needs `publication.settings.manage`. `409 SYNDICATION_POST_NOT_LIVE` when `contentId` has no live announcement; `404 SYNDICATION_CONNECTION_NOT_FOUND` when a connection id is not this publication's; `409 SYNDICATION_CONNECTION_NOT_ACTIVE` when a named connection is paused or needs attention (nothing is filed).
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveries
-      parameters:
-        - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
           in: path
-          name: organizationId
-          required: true
-          schema:
-            format: uuid
-            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
-            type: string
-        - example: 018f0000-0000-7000-8000-000000000001
-          in: path
-          name: publicationId
+          name: connectionId
           required: true
           schema:
             format: uuid
@@ -67250,44 +67234,27 @@ paths:
             type: string
         - $ref: "#/components/parameters/IdempotencyKey"
         - $ref: "#/components/parameters/XCsrfToken"
-      requestBody:
-        content:
-          application/json:
-            examples:
-              nominal:
-                summary: Nominal valid request
-                value:
-                  connectionIds:
-                    - 018f0000-0000-7000-8000-000000000001
-                  contentId: 018f0000-0000-7000-8000-000000000003
-            schema:
-              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesRequest"
-        required: true
       responses:
-        "202":
+        "200":
           content:
             application/json:
               examples:
                 nominal:
                   summary: Nominal successful response
                   value:
-                    deliveries:
-                      - accountLabel: "@example.bsky.social"
-                        attemptCount: 1
-                        connectionId: 018f0000-0000-7000-8000-000000000001
-                        contentId: 018f0000-0000-7000-8000-000000000003
-                        contentTitle: Why we cut onboarding from nine steps to four
-                        createdAt: "2026-11-05T12:00:00.000Z"
-                        externalUrl: https://bsky.app/profile/example.bsky.social/post/3kexample
-                        id: 018f0000-0000-7000-8000-000000000002
-                        kind: bluesky
-                        liveUrl: https://example.com/onboarding/
-                        requestedBy: MANUAL
-                        status: PENDING
-                        updatedAt: "2026-11-05T12:00:00.000Z"
+                    accountLabel: "@example.bsky.social"
+                    createdAt: "2026-11-05T12:00:00.000Z"
+                    id: 018f0000-0000-7000-8000-000000000001
+                    kind: bluesky
+                    lastDelivery:
+                      at: "2026-11-05T12:00:00.000Z"
+                      deliveryId: 018f0000-0000-7000-8000-000000000002
+                      status: SENT
+                    options: {}
+                    status: ACTIVE
               schema:
-                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesResponse"
-          description: send an earlier post to syndication connections accepted
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationConnectionsByConnectionIdVerifyResponse"
+          description: check a syndication connection succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -67297,19 +67264,6 @@ paths:
           content:
             application/problem+json:
               examples:
-                REQUEST_FIELD_UNKNOWN:
-                  summary: REQUEST_FIELD_UNKNOWN
-                  value:
-                    code: REQUEST_FIELD_UNKNOWN
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: REQUEST_FIELD_UNKNOWN
-                    type: urn:gala:problem:request-field-unknown
                 VALIDATION_FAILED:
                   summary: VALIDATION_FAILED
                   value:
@@ -67325,14 +67279,539 @@ paths:
                     type: urn:gala:problem:validation-failed
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
+          description: VALIDATION_FAILED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
-            - REQUEST_FIELD_UNKNOWN
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+                SYNDICATION_CONNECTION_NOT_FOUND:
+                  summary: SYNDICATION_CONNECTION_NOT_FOUND
+                  value:
+                    code: SYNDICATION_CONNECTION_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: SYNDICATION_CONNECTION_NOT_FOUND
+                    type: urn:gala:problem:syndication-connection-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND, SYNDICATION_CONNECTION_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+            - SYNDICATION_CONNECTION_NOT_FOUND
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+        "422":
+          content:
+            application/problem+json:
+              examples:
+                SYNDICATION_CREDENTIAL_REJECTED:
+                  summary: SYNDICATION_CREDENTIAL_REJECTED
+                  value:
+                    code: SYNDICATION_CREDENTIAL_REJECTED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    platformMessage: Bad credentials
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 422
+                    title: SYNDICATION_CREDENTIAL_REJECTED
+                    type: urn:gala:problem:syndication-credential-rejected
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: SYNDICATION_CREDENTIAL_REJECTED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - SYNDICATION_CREDENTIAL_REJECTED
+        "429":
+          content:
+            application/problem+json:
+              examples:
+                RATE_LIMITED:
+                  summary: RATE_LIMITED
+                  value:
+                    code: RATE_LIMITED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 429
+                    title: RATE_LIMITED
+                    type: urn:gala:problem:rate-limited
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RATE_LIMITED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Retry-After:
+              $ref: "#/components/headers/RetryAfter"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RATE_LIMITED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                SYNDICATION_PLATFORM_UNAVAILABLE:
+                  summary: SYNDICATION_PLATFORM_UNAVAILABLE
+                  value:
+                    code: SYNDICATION_PLATFORM_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: SYNDICATION_PLATFORM_UNAVAILABLE
+                    type: urn:gala:problem:syndication-platform-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: SYNDICATION_PLATFORM_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - SYNDICATION_PLATFORM_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: check a syndication connection
+      tags:
+        - syndication
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: authorization-and-publication-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: check a syndication connection
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - RATE_LIMITED
+        - RESOURCE_NOT_FOUND
+        - SYNDICATION_CONNECTION_NOT_FOUND
+        - SYNDICATION_CREDENTIAL_REJECTED
+        - SYNDICATION_PLATFORM_UNAVAILABLE
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/syndication-deliveries:
+    get:
+      description: "The newest 50 deliveries of this publication, newest first: what was posted where, what is waiting to be retried and what failed and why. Needs `publication.view`."
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveries
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    deliveries:
+                      - accountLabel: "@example.bsky.social"
+                        attemptCount: 1
+                        connectionId: 018f0000-0000-7000-8000-000000000001
+                        contentId: 018f0000-0000-7000-8000-000000000003
+                        contentTitle: Why we cut onboarding from nine steps to four
+                        createdAt: "2026-11-05T12:00:00.000Z"
+                        externalUrl: https://bsky.app/profile/example.bsky.social/post/3kexample
+                        id: 018f0000-0000-7000-8000-000000000002
+                        kind: bluesky
+                        liveUrl: https://example.com/onboarding/
+                        requestedBy: ANNOUNCEMENT
+                        status: SENT
+                        updatedAt: "2026-11-05T12:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesResponse"
+          description: list syndication deliveries succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+      security:
+        - browserSession: []
+      summary: list syndication deliveries
+      tags:
+        - syndication
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: authorization-and-publication-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list syndication deliveries
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+    post:
+      description: Files one delivery of a post that is already live to each chosen connection and answers `202` with the new deliveries in the order of `connectionIds`; the posting itself happens afterwards. Needs `publication.settings.manage`. `409 SYNDICATION_POST_NOT_LIVE` when `contentId` has no live announcement; `404 SYNDICATION_CONNECTION_NOT_FOUND` when a connection id is not this publication's; `409 SYNDICATION_CONNECTION_NOT_ACTIVE` when a named connection is paused or needs attention (nothing is filed).
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveries
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  connectionIds:
+                    - 018f0000-0000-7000-8000-000000000001
+                  contentId: 018f0000-0000-7000-8000-000000000003
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    deliveries:
+                      - accountLabel: "@example.bsky.social"
+                        attemptCount: 1
+                        connectionId: 018f0000-0000-7000-8000-000000000001
+                        contentId: 018f0000-0000-7000-8000-000000000003
+                        contentTitle: Why we cut onboarding from nine steps to four
+                        createdAt: "2026-11-05T12:00:00.000Z"
+                        externalUrl: https://bsky.app/profile/example.bsky.social/post/3kexample
+                        id: 018f0000-0000-7000-8000-000000000002
+                        kind: bluesky
+                        liveUrl: https://example.com/onboarding/
+                        requestedBy: MANUAL
+                        status: PENDING
+                        updatedAt: "2026-11-05T12:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdSyndicationDeliveriesResponse"
+          description: send an earlier post to syndication connections accepted
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                REQUEST_FIELD_UNKNOWN:
+                  summary: REQUEST_FIELD_UNKNOWN
+                  value:
+                    code: REQUEST_FIELD_UNKNOWN
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: REQUEST_FIELD_UNKNOWN
+                    type: urn:gala:problem:request-field-unknown
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - REQUEST_FIELD_UNKNOWN
             - VALIDATION_FAILED
         "401":
           content:
@@ -73203,6 +73682,498 @@ paths:
         - OAuthClient:DRAFT -> REVOKED
       x-gala-success-category: update
       x-gala-tenant-scope: NONE
+  /v2/platform/organizations/{organizationId}/plan-grant:
+    delete:
+      description: |
+        Operators only, with recent authentication and a browser session; API keys are refused. Ends the operator plan grant of one organization, which returns to Free unless it subscribes through Stripe. `404 RESOURCE_NOT_FOUND` when the organization does not exist or has no active grant. `409 PLAN_COLLABORATORS_PRESENT` when the organization is a collaborative Pro (`BUSINESS`) organization that still has members besides the owner. `Idempotency-Key` is the command identity.
+      operationId: deletePlatformOrganizationsByOrganizationIdPlanGrant
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "204":
+          description: remove organization plan grant succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+                REAUTH_REQUIRED:
+                  summary: REAUTH_REQUIRED
+                  value:
+                    code: REAUTH_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: REAUTH_REQUIRED
+                    type: urn:gala:problem:reauth-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+            - REAUTH_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                PLAN_COLLABORATORS_PRESENT:
+                  summary: PLAN_COLLABORATORS_PRESENT
+                  value:
+                    code: PLAN_COLLABORATORS_PRESENT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_COLLABORATORS_PRESENT
+                    type: urn:gala:problem:plan-collaborators-present
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, PLAN_COLLABORATORS_PRESENT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - PLAN_COLLABORATORS_PRESENT
+      security:
+        - browserSession: []
+      summary: remove organization plan grant
+      tags:
+        - platform
+      x-gala-action-grant: none
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-assurance-class: RECENT_AUTHENTICATION
+      x-gala-capability-key: platform.billing.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: remove organization plan grant
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - PLAN_COLLABORATORS_PRESENT
+        - REAUTH_REQUIRED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: delete
+      x-gala-tenant-scope: NONE
+    put:
+      description: |
+        Operators only, with recent authentication and a browser session; API keys are refused. Grants an organization Basic (`PRO`) or Pro (`BUSINESS`) without Stripe, until `expiresAt` or open-ended when it is null, and replaces an existing active grant (a new tier or a new end date). `expiresAt` must be in the future; `FREE` is not a grant tier, a DELETE ends the grant. `reasonCode` is a non-sensitive operator reason code recorded in the audit event. `404 RESOURCE_NOT_FOUND` for an unknown organization. `409 PLAN_SUBSCRIBED` when the organization has an active, trialing or past_due Stripe subscription. `409 PLAN_COLLABORATORS_PRESENT` when the change takes a collaborative Pro organization below Pro while it still has members besides the owner. `Idempotency-Key` is the command identity.
+      operationId: putPlatformOrganizationsByOrganizationIdPlanGrant
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  expiresAt: "2026-12-05T12:00:00.000Z"
+                  planTier: PRO
+                  reasonCode: PILOT_CREATOR
+            schema:
+              $ref: "#/components/schemas/PutPlatformOrganizationsByOrganizationIdPlanGrantRequest"
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    expiresAt: "2026-12-05T12:00:00.000Z"
+                    grantedAt: "2026-11-05T12:00:00.000Z"
+                    grantedBy: 018f0000-0000-7000-8000-000000000001
+                    organizationId: 018f0000-0000-7000-8000-000000000001
+                    planTier: PRO
+                    reasonCode: PILOT_CREATOR
+              schema:
+                $ref: "#/components/schemas/PutPlatformOrganizationsByOrganizationIdPlanGrantResponse"
+          description: set organization plan grant succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            ETag:
+              $ref: "#/components/headers/ETag"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                REQUEST_FIELD_UNKNOWN:
+                  summary: REQUEST_FIELD_UNKNOWN
+                  value:
+                    code: REQUEST_FIELD_UNKNOWN
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: REQUEST_FIELD_UNKNOWN
+                    type: urn:gala:problem:request-field-unknown
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - REQUEST_FIELD_UNKNOWN
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+                REAUTH_REQUIRED:
+                  summary: REAUTH_REQUIRED
+                  value:
+                    code: REAUTH_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: REAUTH_REQUIRED
+                    type: urn:gala:problem:reauth-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+            - REAUTH_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                PLAN_COLLABORATORS_PRESENT:
+                  summary: PLAN_COLLABORATORS_PRESENT
+                  value:
+                    code: PLAN_COLLABORATORS_PRESENT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_COLLABORATORS_PRESENT
+                    type: urn:gala:problem:plan-collaborators-present
+                PLAN_SUBSCRIBED:
+                  summary: PLAN_SUBSCRIBED
+                  value:
+                    code: PLAN_SUBSCRIBED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_SUBSCRIBED
+                    type: urn:gala:problem:plan-subscribed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, PLAN_COLLABORATORS_PRESENT, PLAN_SUBSCRIBED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - PLAN_COLLABORATORS_PRESENT
+            - PLAN_SUBSCRIBED
+      security:
+        - browserSession: []
+      summary: set organization plan grant
+      tags:
+        - platform
+      x-gala-action-grant: none
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-assurance-class: RECENT_AUTHENTICATION
+      x-gala-capability-key: platform.billing.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: set organization plan grant
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - PLAN_COLLABORATORS_PRESENT
+        - PLAN_SUBSCRIBED
+        - REAUTH_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: update
+      x-gala-tenant-scope: NONE
   /v2/platform/overview:
     get:
       description: |
@@ -74882,6 +75853,12 @@ paths:
                         displayName: Ada Reader
                         lastSignInAt: "2026-10-10T11:30:00.000Z"
                         login: ada-reader
+                        organizations:
+                          - grant: null
+                            name: Ada Reader
+                            organizationId: 018f0000-0000-7000-8000-000000000001
+                            planSource: STRIPE
+                            planTier: PRO
                         personId: 018f0000-0000-7000-8000-000000000001
                         planTiers:
                           - FREE